Adding negative testcase for dynamic config

api/v1/aerospikecluster_mutating_webhook.go

@@ -31,6 +31,7 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
 
 	"github.com/aerospike/aerospike-kubernetes-operator/pkg/merge"
+	lib "github.com/aerospike/aerospike-management-lib"
 )
 
 //nolint:lll // for readability
@@ -248,21 +249,19 @@ func (c *AerospikeCluster) updateRacksAerospikeConfigFromGlobal(asLog logr.Logge
 	for idx := range c.Spec.RackConfig.Racks {
 		rack := &c.Spec.RackConfig.Racks[idx]
 
-		var (
-			m   map[string]interface{}
-			err error
-		)
+		var m map[string]interface{}
 
 		if rack.InputAerospikeConfig != nil {
 			// Merge this rack's and global config.
-			m, err = merge.Merge(
+			merged, err := merge.Merge(
 				c.Spec.AerospikeConfig.Value, rack.InputAerospikeConfig.Value,
 			)
-
 			if err != nil {
 				return err
 			}
 
+			m = lib.DeepCopy(merged).(map[string]interface{})
+
 			asLog.V(1).Info(
 				"Merged rack config from global aerospikeConfig", "rack id",
 				rack.ID, "rackAerospikeConfig", m, "globalAerospikeConfig",

api/v1/aerospikecluster_types.go

@@ -659,6 +659,11 @@ type AerospikeClusterStatusSpec struct { //nolint:govet // for readability
 	// +kubebuilder:pruning:PreserveUnknownFields
 	// +nullable
 	AerospikeConfig *AerospikeConfigSpec `json:"aerospikeConfig,omitempty"`
+	// EnableDynamicConfigUpdate enables dynamic config update flow of the operator.
+	// If enabled, operator will try to update the Aerospike config dynamically.
+	// In case of inconsistent state during dynamic config update, operator falls back to rolling restart.
+	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Enable Dynamic Config Update"
+	EnableDynamicConfigUpdate *bool `json:"enableDynamicConfigUpdate,omitempty"`
 	// Define resources requests and limits for Aerospike Server Container.
 	// Please contact aerospike for proper sizing exercise
 	// Only Memory and Cpu resources can be given
@@ -994,6 +999,14 @@ func CopySpecToStatus(spec *AerospikeClusterSpec) (*AerospikeClusterStatusSpec,
 		status.OperatorClientCertSpec = clientCertSpec
 	}
 
+	if spec.EnableDynamicConfigUpdate != nil {
+		enableDynamicConfigUpdate := lib.DeepCopy(
+			spec.EnableDynamicConfigUpdate,
+		).(*bool)
+
+		status.EnableDynamicConfigUpdate = enableDynamicConfigUpdate
+	}
+
 	// Storage
 	statusPodSpec := lib.DeepCopy(&spec.PodSpec).(*AerospikePodSpec)
 	status.PodSpec = *statusPodSpec
@@ -1083,6 +1096,14 @@ func CopyStatusToSpec(status *AerospikeClusterStatusSpec) (*AerospikeClusterSpec
 		spec.OperatorClientCertSpec = clientCertSpec
 	}
 
+	if status.EnableDynamicConfigUpdate != nil {
+		enableDynamicConfigUpdate := lib.DeepCopy(
+			status.EnableDynamicConfigUpdate,
+		).(*bool)
+
+		spec.EnableDynamicConfigUpdate = enableDynamicConfigUpdate
+	}
+
 	// Storage
 	specPodSpec := lib.DeepCopy(&status.PodSpec).(*AerospikePodSpec)
 

api/v1/aerospikecluster_validating_webhook.go

@@ -1358,7 +1358,7 @@ func validateAerospikeConfigUpdate(
 		}
 	}
 
-	return validateNsConfUpdate(incomingSpec, outgoingSpec, currentStatus, incomingVersion)
+	return validateNsConfUpdate(incomingSpec, outgoingSpec, currentStatus)
 }
 
 func validateTLSUpdate(oldConf, newConf map[string]interface{}) error {
@@ -1516,7 +1516,7 @@ func validateNetworkPolicyUpdate(oldPolicy, newPolicy *AerospikeNetworkPolicy) e
 	return nil
 }
 
-func validateNsConfUpdate(newConfSpec, oldConfSpec, currentStatus *AerospikeConfigSpec, incomingVersion string) error {
+func validateNsConfUpdate(newConfSpec, oldConfSpec, currentStatus *AerospikeConfigSpec) error {
 	newConf := newConfSpec.Value
 	oldConf := oldConfSpec.Value
 
@@ -1550,13 +1550,8 @@ func validateNsConfUpdate(newConfSpec, oldConfSpec, currentStatus *AerospikeConf
 			}
 
 			if singleConf["name"] == oldSingleConf["name"] {
-				val, err := lib.CompareVersions(incomingVersion, Version6)
-				if err != nil {
-					return fmt.Errorf("failed to check image version: %v", err)
-				}
-
-				// For versions 6.0 and later, replication-factor is dynamic for AP namespaces (non strong-consistency).
-				if (IsNSSCEnabled(singleConf) || val < 0) && isValueUpdated(
+				// replication-factor update not allowed
+				if isValueUpdated(
 					oldSingleConf, singleConf, "replication-factor",
 				) {
 					return fmt.Errorf(

config/crd/bases/asdb.aerospike.com_aerospikeclusters.yaml

@@ -9601,6 +9601,12 @@ spec:
                     - customInterface
                     type: string
                 type: object
+              enableDynamicConfigUpdate:
+                description: EnableDynamicConfigUpdate enables dynamic config update
+                  flow of the operator. If enabled, operator will try to update the
+                  Aerospike config dynamically. In case of inconsistent state during
+                  dynamic config update, operator falls back to rolling restart.
+                type: boolean
               image:
                 description: Aerospike server image
                 type: string

config/manifests/bases/aerospike-kubernetes-operator.clusterserviceversion.yaml

@@ -47,12 +47,12 @@ spec:
           the Aerospike cluster.
         displayName: Aerospike Network Policy
         path: aerospikeNetworkPolicy
-      - description: EnableDynamicUpdate enables dynamic config update flow of the
-          operator. If enabled, operator will try to update the Aerospike config dynamically.
-          In case of inconsistent state during dynamic config update, operator falls
-          back to rolling restart.
-        displayName: EnableDynamicUpdate
-        path: enableDynamicUpdate
+      - description: EnableDynamicConfigUpdate enables dynamic config update flow
+          of the operator. If enabled, operator will try to update the Aerospike config
+          dynamically. In case of inconsistent state during dynamic config update,
+          operator falls back to rolling restart.
+        displayName: Enable Dynamic Config Update
+        path: enableDynamicConfigUpdate
       - description: Aerospike server image
         displayName: Server Image
         path: image

config/samples/secrets/server-cert.pem

@@ -2,78 +2,84 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            bc:b2:59:97:0d:d4:37:b7
-    Signature Algorithm: sha256WithRSAEncryption
+            1a:b3:73:28:82:32:20:ca:f1:b2:72:57:4f:42:62:51:ad:d3:ec:df
+        Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=US, ST=CA, L=Mountain View, O=Aerospike, Inc., OU=Engineering Test, CN=Root CA
-        IssuerFile: ca-cert2.pem
         Validity
-            Not Before: Apr 21 07:40:04 2023 GMT
-            Not After : Apr 20 07:40:04 2024 GMT
-        Subject: C=US, ST=CA, L=Mountain View, O=Aerospike, Inc., OU=Cluster Name Test, CN=aerospike-a-0.test-runner
+            Not Before: Apr 22 08:57:01 2024 GMT
+            Not After : Aug 24 08:57:01 3023 GMT
+        Subject: C=US, ST=CA, O=Aerospike, OU=Engineering Test, CN=aerospike-a-0.test-runner
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:ea:38:e7:cc:6d:27:61:a8:a4:42:f2:d1:88:f5:
-                    a9:4f:bb:27:25:5b:c9:fd:6c:68:09:72:e0:b8:b5:
-                    1f:76:ac:3b:49:8d:29:9f:fb:da:15:9f:b3:a8:14:
-                    71:6a:dd:e5:ec:7f:e4:7e:ee:38:7b:81:d7:4d:e2:
-                    4a:e7:40:e7:f9:d5:f7:e2:f6:18:c1:47:06:96:84:
-                    6a:da:89:d8:28:ee:ba:9a:4d:79:fc:3b:41:a6:c7:
-                    fe:57:dd:4f:d6:33:4e:54:c2:8c:b6:53:69:11:a5:
-                    f2:16:45:3e:4f:15:5c:93:f2:88:ed:6c:5d:cd:87:
-                    98:ca:d7:ae:87:b3:45:7a:45:ca:3a:9a:b3:6b:86:
-                    53:4d:03:07:51:6f:bc:45:18:36:4b:79:66:78:79:
-                    4a:68:39:fc:25:5f:88:b2:c8:fa:f5:cb:5b:a5:d0:
-                    8a:6e:92:c4:6a:3c:13:63:91:65:d8:d5:f3:dc:85:
-                    e0:7c:da:d7:cb:97:2b:35:15:f0:2e:d8:84:df:b9:
-                    c7:8f:a4:1a:7c:d5:20:3e:fc:6d:fe:e8:c0:2a:1f:
-                    52:da:d4:85:5d:d2:22:04:ff:fd:10:37:23:a7:ce:
-                    32:10:89:68:80:6b:2f:c5:23:76:d0:61:5a:0d:4b:
-                    c2:00:a9:a4:db:b5:4e:30:d2:f4:2c:0a:9e:98:12:
-                    4f:67
+                    00:a0:f1:9e:06:10:10:f9:75:00:bd:fc:94:05:1c:
+                    16:41:bf:25:dc:2f:05:6a:51:28:83:ba:9b:f2:16:
+                    c1:a7:58:b2:c7:5f:c8:50:43:5d:21:b8:a6:0c:6c:
+                    8a:2c:40:57:86:e8:40:4e:2f:b3:08:7f:e8:69:6f:
+                    35:c9:a5:ee:24:7a:65:79:62:9c:41:f2:aa:62:fd:
+                    8d:ad:f1:da:fb:fe:96:83:30:e9:e4:c9:6e:34:04:
+                    aa:eb:b0:dd:06:5a:ca:67:35:f2:02:ea:12:46:8f:
+                    ca:56:cf:7a:3f:80:17:ca:c7:49:0f:cc:3c:dd:6f:
+                    36:ff:66:94:6f:ec:f4:dd:5a:bb:c2:48:e3:8f:84:
+                    d9:df:14:d5:29:06:72:a0:40:ee:f5:95:be:8a:cf:
+                    b6:80:54:e2:15:59:25:c4:5e:ab:8f:b3:01:c1:84:
+                    e8:71:55:69:85:ab:a2:6b:98:5b:7d:a9:9b:27:fb:
+                    e9:47:87:80:06:06:c9:23:b4:54:12:2e:32:36:f6:
+                    a7:f2:59:5b:64:41:21:9f:10:e6:db:af:dd:40:f9:
+                    1e:49:d5:74:ff:58:88:e1:85:47:e7:b8:8f:d1:e6:
+                    b8:da:09:ae:61:e7:89:65:07:d5:81:36:e4:71:e1:
+                    70:8f:66:76:77:e6:3c:ef:d4:71:48:11:fa:bf:7b:
+                    e0:bd
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Alternative Name:
                 DNS:aerospike-a-0.test-runner, DNS:aerospike-a-1.test-runner, DNS:aerospike-a-2.test-runner, DNS:aerospike-a-3.test-runner, DNS:aerospike-a-4.test-runner, DNS:aerospike-a-5.test-runner
+            X509v3 Subject Key Identifier:
+                E7:A1:BF:11:DB:27:49:B9:59:75:B8:0A:C9:01:48:9C:85:31:F7:7E
+            X509v3 Authority Key Identifier:
+                CB:DD:69:7B:6D:3D:C7:6F:36:C0:EB:AF:4C:26:4D:3E:E0:97:53:61
     Signature Algorithm: sha256WithRSAEncryption
-         08:63:53:34:d1:8e:e9:96:5d:45:fb:13:61:63:83:25:ef:9d:
-         45:fd:30:0f:12:ab:d5:ac:6e:cd:76:73:c6:96:02:b5:1d:33:
-         e9:ee:32:84:8b:39:0d:ab:a4:03:7f:f2:c5:0a:24:3e:59:75:
-         37:28:ef:d4:6c:4c:2a:c0:45:bf:02:4a:5d:e5:7d:44:bb:f8:
-         63:3a:28:f6:ff:f6:8d:ed:c4:50:e8:48:cd:86:67:ab:1d:43:
-         86:f9:f7:cb:e5:db:85:9e:ed:c1:fe:97:ef:04:54:2d:ff:ab:
-         fd:ad:e9:85:2e:c2:ce:b2:0c:af:bb:4a:80:3a:5c:f8:c9:04:
-         5f:10:2e:18:3b:7a:35:42:86:da:d7:a5:74:dd:2d:58:81:96:
-         a7:ab:01:98:c4:36:eb:d3:62:70:2d:5b:24:f7:db:c0:43:42:
-         46:37:a1:57:25:7c:d5:43:a3:f9:75:35:46:f2:00:3b:8b:e1:
-         59:af:58:cf:84:1d:97:0f:72:9b:b6:c4:82:8e:15:37:d1:25:
-         34:7a:2e:ae:23:03:27:e9:8a:43:c8:0e:34:15:f1:15:62:e2:
-         f1:8b:e1:1b:f2:1a:50:d0:97:cb:bf:96:61:d9:f0:ca:75:b5:
-         09:49:22:c6:d2:59:c9:c2:23:36:f3:c4:ab:8d:4a:fd:df:08:
-         2e:1f:7d:90
+    Signature Value:
+        4b:2c:dc:65:27:63:a5:20:f3:e5:d4:42:66:d1:87:2a:74:48:
+        e1:63:89:1e:5a:43:41:e3:45:28:5d:fe:65:d4:9a:f7:20:0c:
+        c6:51:86:12:e0:59:12:e0:f7:5a:fc:9e:04:ab:ee:b7:c6:f5:
+        84:53:46:33:a4:2f:af:35:2a:08:33:31:eb:5c:d3:e5:2c:2b:
+        c3:fd:27:49:98:67:60:e1:ba:79:d3:be:c9:df:6d:2f:a7:59:
+        69:7b:6d:18:ec:7a:71:17:ab:9e:4a:dd:09:86:04:73:fe:35:
+        11:64:70:1a:08:45:73:7d:d4:0d:d7:39:55:c9:86:e0:f2:79:
+        1c:f6:6e:ac:af:fa:79:9d:02:f3:20:dd:2f:19:34:92:9c:b4:
+        50:1d:cb:45:fb:6f:41:d0:52:10:28:c0:a6:45:06:b9:c4:50:
+        d0:6b:83:3a:31:eb:07:b6:64:5b:a6:01:8b:b2:2f:33:84:1e:
+        9d:a5:a2:eb:e6:fa:85:51:67:a3:e1:fb:89:9f:22:15:41:c0:
+        d7:54:c2:36:b2:49:f8:fb:94:c7:44:04:5d:0f:70:b8:8e:f5:
+        31:da:27:d8:8f:21:22:87:a7:df:32:2b:61:46:c2:de:e6:5d:
+        96:f0:40:f5:b9:9e:ef:da:f4:90:94:7e:55:16:d7:9e:37:a4:
+        13:56:61:5d
+
 -----BEGIN CERTIFICATE-----
-MIIEMTCCAxmgAwIBAgIJALyyWZcN1De3MA0GCSqGSIb3DQEBCwUAMHkxCzAJBgNV
-BAYTAlVTMQswCQYDVQQIDAJDQTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzEYMBYG
-A1UECgwPQWVyb3NwaWtlLCBJbmMuMRkwFwYDVQQLDBBFbmdpbmVlcmluZyBUZXN0
-MRAwDgYDVQQDDAdSb290IENBMB4XDTIzMDQyMTA3NDAwNFoXDTI0MDQyMDA3NDAw
-NFowgYAxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTEWMBQGA1UEBwwNTW91bnRh
-aW4gVmlldzEYMBYGA1UECgwPQWVyb3NwaWtlLCBJbmMuMRowGAYDVQQLDBFDbHVz
-dGVyIE5hbWUgVGVzdDEWMBQGA1UEAwwNYm9iLWNsdXN0ZXItYTCCASIwDQYJKoZI
-hvcNAQEBBQADggEPADCCAQoCggEBAOo458xtJ2GopELy0Yj1qU+7JyVbyf1saAly
-4Li1H3asO0mNKZ/72hWfs6gUcWrd5ex/5H7uOHuB103iSudA5/nV9+L2GMFHBpaE
-atqJ2CjuuppNefw7QabH/lfdT9YzTlTCjLZTaRGl8hZFPk8VXJPyiO1sXc2HmMrX
-roezRXpFyjqas2uGU00DB1FvvEUYNkt5Znh5Smg5/CVfiLLI+vXLW6XQim6SxGo8
-E2ORZdjV89yF4Hza18uXKzUV8C7YhN+5x4+kGnzVID78bf7owCofUtrUhV3SIgT/
-/RA3I6fOMhCJaIBrL8UjdtBhWg1LwgCppNu1TjDS9CwKnpgST2cCAwEAAaOBszCB
-sDCBrQYDVR0RBIGlMIGighlhZXJvc3Bpa2UtYS0wLnRlc3QtcnVubmVyghlhZXJv
-c3Bpa2UtYS0xLnRlc3QtcnVubmVyghlhZXJvc3Bpa2UtYS0yLnRlc3QtcnVubmVy
-ghlhZXJvc3Bpa2UtYS0zLnRlc3QtcnVubmVyghlhZXJvc3Bpa2UtYS00LnRlc3Qt
-cnVubmVyghlhZXJvc3Bpa2UtYS01LnRlc3QtcnVubmVyMA0GCSqGSIb3DQEBCwUA
-A4IBAQAIY1M00Y7pll1F+xNhY4Ml751F/TAPEqvVrG7NdnPGlgK1HTPp7jKEizkN
-q6QDf/LFCiQ+WXU3KO/UbEwqwEW/Akpd5X1Eu/hjOij2//aN7cRQ6EjNhmerHUOG
-+ffL5duFnu3B/pfvBFQt/6v9remFLsLOsgyvu0qAOlz4yQRfEC4YO3o1Qoba16V0
-3S1YgZanqwGYxDbr02JwLVsk99vAQ0JGN6FXJXzVQ6P5dTVG8gA7i+FZr1jPhB2X
-D3KbtsSCjhU30SU0ei6uIwMn6YpDyA40FfEVYuLxi+Eb8hpQ0JfLv5Zh2fDKdbUJ
-SSLG0lnJwiM288SrjUr93wguH32Q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 -----END CERTIFICATE-----

config/samples/secrets/server_key.pem

@@ -1,28 +1,28 @@
 -----BEGIN PRIVATE KEY-----
-MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDqOOfMbSdhqKRC
-8tGI9alPuyclW8n9bGgJcuC4tR92rDtJjSmf+9oVn7OoFHFq3eXsf+R+7jh7gddN
-4krnQOf51ffi9hjBRwaWhGraidgo7rqaTXn8O0Gmx/5X3U/WM05Uwoy2U2kRpfIW
-RT5PFVyT8ojtbF3Nh5jK166Hs0V6Rco6mrNrhlNNAwdRb7xFGDZLeWZ4eUpoOfwl
-X4iyyPr1y1ul0IpuksRqPBNjkWXY1fPcheB82tfLlys1FfAu2ITfucePpBp81SA+
-/G3+6MAqH1La1IVd0iIE//0QNyOnzjIQiWiAay/FI3bQYVoNS8IAqaTbtU4w0vQs
-Cp6YEk9nAgMBAAECggEBAIAvUpTrrCDjZbqKH6jgIaBUIdFtUbeTS8DYESqlXana
-CrxvODepYypwc6dqQMQm2v265Lee8mSNo+KpFStIt2xg8MBSxSuKDo3zvHML+7Qz
-KwblnfwwBfcb/xPhOB9XhugWbWIfdiJFep87mCU54KfLlaqyowenzTQ+I/N6ZmzK
-lu+mQcdhOQmZ0YlwmRWIh8fUIt2yVMtaIrE76TxzcwgM2Vr2v4L7fcvrdQhTFneS
-kNPOw7yztmFQQCmfn4Yl98oLr1ZkqR9uH5czcu3pLyfAmvo9Uz8ttS3gzidoavDZ
-dfyEMJRAKbQAUZi/F4d52oZzRZseCYPkxgDqW/0Nb9kCgYEA/oF8h3M8zq5mjFN9
-o7iscuLcdZOlQpWSmcEaGmdyjoIw2j+EdjH0Eta38qOkNUpvSTqWNondc9RCFeDn
-S9fyf5R5OqLXAzhPLQA15tIRpcBc9PqSgRn6q9aLJXJIoz4J+5UB8bJ8V6gsiwCP
-p7Q+m+fccTpd1cSgfuOnUcZgS2sCgYEA65ju/0GTJwbtMnzT5Lq+9nI6UxmCMiLY
-DCAeRXGjuesQfDDJaOkgKXf8LG2dwhWy6dM82D1SzduMfPkcBr7aNzpIcRpAq+tY
-hvBTwaSQQ2H5VZj+v+Q4nU4RhFBZrO9R8zgV+jsYb0Mr2wYjOBCCqtvmHkPWCr3R
-u1M4UaB45vUCgYBkr0dbsqxAu+AX7cPLrHiUrsk2vqVndRLdPvabsYcxd7Hp9azq
-sZJ0jXuSQ0joSD1EhCf/BYWVmEhYrXPznkfyTwOyvc9AF9vC2s14Nm0C3NoplKO2
-7Vcs+iBsPQ0df6KlY+qz+r+UUhTlHOC4IOeP+CdOqB+NPU+dQ2TjRg68ZwKBgDpn
-7H/9SrS3I+CLT6B5p1PDV7A4N62kM7k10StYE8XIf4q6MYQ/nwiIxUxiVGTEKlmL
-U58r/LYqAncM7qTBdamRWlonrvav3n99XtY3rMf3pu9QgX8i3eIpc3BA1ypnHgLU
-2aXyNomGtn2S1PJWLX6cCz1fhdWd3zu4UtLxnGdtAoGAUQXOWpmFzeH7EdSmpHre
-i6dds3fnKTLCQaIzImjeE9ITqX0lmj/3Y+qlB9ZUfA+UAfv7JAd44xnSO6gY51c1
-7DJ4BUA4JVjgzHpJMT2kOJh5s6PyHjyoNbBEHHUeXqEJVQouOxVyOKTQyM2UeHWn
-tOnGqfMs8rsMBM96VSui+W0=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 -----END PRIVATE KEY-----

controllers/aero_info_calls.go

@@ -338,7 +338,7 @@ func (r *SingleClusterReconciler) setDynamicConfig(
 
 	for _, host := range selectedHostConns {
 		podName := podIPNameMap[host.ASConn.AerospikeHostName]
-		asConfCmds, err := asconfig.CreateSetConfigCmdList(dynamicConfDiffPerPod[podName],
+		asConfCmds, err := asconfig.CreateSetConfigCmdList(r.Log, dynamicConfDiffPerPod[podName],
 			host.ASConn, r.getClientPolicy())
 
 		if err != nil {